Ikonboard.com Ikonboard — known CVE vulnerabilities

Every CVE whose affected-product data names Ikonboard.com Ikonboard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2001-0076 — CVSS 10.0 (critical): register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which…
• CVE-2001-0841 — CVSS 7.5 (high): Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain…
• CVE-2002-0328 — CVSS 7.5 (high): Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and…
• CVE-2003-0770 — CVSS 7.5 (high): FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters…
• CVE-2004-1406 — CVSS 7.5 (high): SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via…
• CVE-2001-0360 — CVSS 5.0 (medium): Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a…